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FRAME ID: 5010 


(U) Module 5 


(U) The Analytical and Technical Work Roles 


SS eee ee (U) This module will enable you to: 


e (U) Compare and contrast the analytical and technical work roles 


e (U) Identify analytical and technical personnel’s authorization to touch the data 


e (U) Identify how the authorities impact interactions with other roles and the data 


GRAPHIC/AV: 
(U) Insert image of HMC Character and 
Technical Character sitting at a table 


(U) (Technical Character): During this part of our trip we will compare and contrast the analytical and technical work roles and provide you with a basic 
knowledge of the two distinct areas. This will serve as an introduction to the more role-specific module you will complete later. 


(U) This module will enable you to: 
e (U) Compare and contrast the analytical and technical work roles 
e (U) Identify analytical and technical personnels authorization to touch the data 
e (U) Identify how the authorities impact interactions with other roles and the data 
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FRAME ID: 5020 
(U) The Analytical Work Role 


(FSHSHENF) The Analytical Work Role includes these primary functions: 
e HMC 
e Those who conduct intelligence analysis queries 
e Those who can view and disseminate the results of intelligence analysis queries 


NEXT FRAME ID: 5030 


BACK FRAME ID: 5010 
ALT TAG: 


GRAPHIC/AV: 

(U) Begin with image of HMC Character 
and Technical Character sitting at a table, 
then provide a close up of the HMC 
Character 


(FSHSIENE) (HMC Character): The analytical work role includes three primary functions: Homeland Mission Coordinators (HMC), those who can conduct 
intelligence analysis queries, and those who can view and disseminate the results of intelligence analysis queries. 


(FSHSILNE) Homeland Mission Coordinators, or HMCs, review and approve the RAS nominations. The analysts and HMCs work through the RAS approval 
process together to get the identifiers RAS-approved. 


(FS#SWNE) Recall from the last module that not all analvsts are permitted to conduct contact chaining queries. Those who are permitted to conduct 
queries of the bulk metadata have been granted redentials. Those who are permitted to view and disseminate query results, but 
not conduct queries, have been granted Eine credentials. 
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FRAME ID: 5030 
(U) The Technical Work Role 


(FSHSHNE) The Technical Work Role is made up of two main functions: 
e Support to Collection and Metadata 


NEXT FRAME ID: 5040 , 
e Support to Storage, Presentation, and Maintenance 


BACK FRAME ID: 5020 
ALT TAG: 


GRAPHIC/AV: 

(U) Begin with image of HMC Character 
and Technical Character sitting at a table, 
then provide a close up of the Technical 
Character 


(FSHSIENF) (Technical Character): The work performed by technical personnel in support of the Bulk Metadata Programs assists everyone working in 
support of these programs to maintain compliance with applicable legal documents and relevant authorities. Within the technical roles, there are two main 
areas of responsibility: collection and metadata een the storage, presentation, and maintenance of the metadata. 


(TS//SI//NF) Some high-level examples of how key organizations support collection and metadata WRG 
. lto gain access to BR and PR/TT metadata. 
© N C eVciops protocol processing software that supports the collection and metadata l- o standardization. 
e Mission Capabilities (TD) integrates the BR and PR/TT protocol processing software into the larger exploitation systems. 
(TSAS WNF) EEE and Mission Capabilities also support the storage, presentation, and maintenance aspects of the Bulk Metadata 
Programs, and some high-level examples include: 
e Mission Capabilities manages the BR and PR/TT repositories, as well as prepares the metadata for the analysts to use. 


© N Provides reasonable assurance that the data is normalized and presented in a usable format and provides support to 
intelligence analysts. 
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Touch the Data 


FRAME ID: 5040 
(U) Authorization to Touch the Data 


(U) Analytical and technical personnel have different authorization to touch the metadata 


due to the nature of their work roles 
NEXT FRAME ID: 5050 


(U) Authorization for Analytical Personnel 


Sis) _—_—_— Perform intelligence analysis (querying the 


BACK FRAME ID: 5030 data) 
ALT TAG: 


(U) Authorizations for Technical Personnel 


V: : . 
C of HMC Character and E Create, test, and implement tools to make this 
Technical Character sitting at a table data easier for analytic personnel to use S 


— a control analyst's access 
(TSHSI/ Perform processes to make the data usable 
o Validation 
Defeat of collection 
Processing 


Analysis of high-volume identifiers 
Maintenance of records to demonstrate compliance 


(FSHSI/NF) (Technical Character): As we have discussed throughout the course, the sensitivity of the data drives many of the policies and restrictions that 
control access to the BR and PR/TT bulk metadata. However, because of the different roles and responsibilities of analytical and technical personnel, both 
have different authorizations to touch the metadata. Recall from Module 1 we defined “touching the data” as any form of data handling that creates an 
opportunity for a violation of the FISC Orders to occur. These activities may include data acquisition, modifying/preparing the data, querying, viewing results 
of the queries, and even oversight and compliance functions. 


(FSHSHANF) (HMC Character): Analytic personnel have authorization to touch the metadata to perform intelligence analysis. Analyst actions, such as 
querying the metadata for intelligence analysis purposes, must be done in a controlled way via tools designed to limit intelligence analysis access to RAS- 
approved identifiers and to the appropriate number of hops. Using these tools also provides reasonable assurance that these queries are tracked and 
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audited. 


(FSHSIZNE) (Technical Character): Technical personnel create, test, and implement tools to make this data easier for analytic personnel to use, while 
validating that safeguards appropriately control analysts’ access to the bulk metadata. Additionally, technical personnel may access the metadata to 
perform those processes needed to make the metadata usable for intelligence analysis. These processes may include metadata validation; the defeat 
of the collection, processing, or analysis of metadata associated with MEE identifiers; and the maintenance of records to demonstrate 
compliance with the terms of the authority. 


case Of MN identifiers, technical personnel may use non-RAS-approved identifiers to query the metadata to confirm if the identifier | is a 
WB entier and thus should not be included for target analysis. They may then share the identifier and the fact that it is a MJidentifier 
with authorized personnel. However, no other information resulting from such queries can be used for intelligence analysis purposes. 


(FSHSH/NEF) Technical personnel must take great care with their responsibilities because they may be accessing the data through tools that do not have 
safeguards, such as E that impose restrictions and minimize the chances of a violation of the FISC Orders. As a result, we need to maintain 
boundaries between technical and analytical personnel, and be crystal clear as to the circumstances under which the two groups can interact. 
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Analytical and Technical 
Personnel 


FRAME ID: 5050 


(U) Interaction Between Analytical and Technical Personnel 


(U) (Begin with image of analytical and Technical Character sitting at a table, then provide a close up of the 
Technical Character) 

NEXT FRAME ID: 5060 
(FSHSIANF) All interactions must be based on RAS-approved identifiers and those results found within the 
number of hops authorized for intelligence analysis purposes 


BACK FRAME ID: 5040 


ALT TAG: 


GRAPHIC/AV: 
(U) Insert image of HMC Character and 
Technical Character sitting at a table 


(FSHSIZNF) (Technical Character): As we just discussed, analytical and technical personnel have different authorizations to touch this metadata. 
Because of these different authorizations, we must be careful when the two types of personnel are interacting with regard to this metadata. Specifically, 
outside of the sharing of RE identifiers for defeat purposes, technical personnel should only be providing analytical personnel information 
under certain conditions. 


(FSHSIANF) (HMC Character): Sometimes, when analyzing the results of intelligence analysis queries, one or more of the specific results may seem out 
of the ordinary. Is it a ME identifier that was overlooked? Is the identifier misnormalized? Is there something that just seems out of place? Or 
perhaps there is a particular data field in your results that you don’t understand. In such instances, intelligence analysts may require assistance from 
certain technical personnel responsible for data integrity functions. 


(FSHSIANF) (Technical Character): In these instances, technical personnel may assist authorized intelligence analysts, but any and all assistance must 
be based on RAS-approved identifiers and those results found within the number of hops authorized for intelligence analysis purposes. Essentially, 
when providing information to analytical personnel in these circumstances, the technical personnel must abide by the rules for the analytical personnel. 


(FSHSHENF) (Technical Character): In the end, all personnel have a vested interest and shared responsibility in ensuring that only the most accurate 
intelligence information is reported to customers, while abiding by the policies and requirements in place for this metadata. 
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FRAME ID: 5060 (U) Knowledge Check 
1. GS4HSIANF) TRUE or FALSE: Technical personnel and analytic work roles have the same authorization to 
touch the bulk metadata. 
a) TRUE 


NEXT FRAME ID: 5070 b) FALSE 


2. (FSHSIENF) The Analytic Work Role includes these functions: intelligence analysts who query the data, 


intelligence analysts who can view the results of intelligence analysis queries, and 
BACK FRAME ID: 5050 a) Mission Capabilities (TD) 
ALT TAG: b) 


GRAPHIC/AV: c) Homeland Mission Coordinators (HMC) 
ae 
3. (FSHSIENF) The Technical Work Roles are comprised of two general areas of responsibility including 1) 
and 2) 
a) 1) collection and metadata —) reviewing RAS nominations 
b) 1) collection of content, 2) storage, presentation, and maintenance of the metadata 
c) 1) reviewing RAS nominations, 2) working with the telecommunications partners 
d) 1) collection and metadata i 2) storage, presentation, and maintenance of the 
metadata 


O Teenie: Lemak a f notes mou ave foumaiandisre whei werememtentonihsdae n o il (Technical Character): Let's make a few notes in our travel journal and see what we remember from this topic. 


a 

Question 1. (FSHSIANF) Correct! The answer is b) FALSE. Technical personnel have authority to make the metadata usable for intelligence analysis, while 
analytical personnel can only touch the bulk metadata for intelligence analysis purposes using RAS-approved identifiers within the authorized number of 
hops. 

(FSHSIZNEF) Incorrect. The correct answer is b) FALSE. Technical personnel have authority to make the metadata usable for intelligence analysis, while 
analytical personnel can only touch the bulk metadata for intelligence analysis purposes using RAS-approved identifiers within the authorized number of 
hops. 
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Question 2. (FSHSIANF) Correct! The correct answer is c). The Analytical Work Role includes analysts and Homeland Mission Coordinators (HMC). 
(FSHSIZNEF) Incorrect. The correct answer is c). The Analytical Work Role includes analysts and Homeland Mission Coordinators (HMC). 


Question 3. (TS//SI//NF) Right! The correct answer is d). The Technical Work Roles are comprised of two general areas of support including collection and 
metadata EAS well as storage, presentation, and maintenance of the metadata. 

(TS//SI//NE) Incorrect. The correct answer is d). The Technical Work Roles are comprised of two general areas of support including collection and 
metadata [EEE as well as storage, presentation, and maintenance of the metadata. 
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FRAME ID: 5070 (U) Knowledge Check 


4. (FSHSHNE) staff have access to the bulk metadata in order to prepare the metadata for 
the analysts to use. 

a) 

b) Mission Capabilities (TD) 

c) Analytical 

d) Office of General Counsel (QGC) 


NEXT FRAME ID: 5080 


5. FSHSHA) If an intelligence analyst seeks assistance from technical personnel, technical personnel 


BACK FRAME ID: 5060 
ALT TAG: a) can query the metadata to confirm the analyst’s results and point out potentially noteworthy 
contacts at the third or fourth hop 


(No audio or transcript on this page) 


GRAPHIC/AV: b) should explain that they are unable to assist in any way, except to identify] | 

identifiers 

c) may offer assistance, but must be cautious that any results shared or discussed are 
based on a RAS-approved identifiers and those results that fall within the number of hops 
authorized for intelligence analysis purposes 
should provide whatever assistance is needed, but make a note of it in case anyone in 
management has questions later 
should decline to assist because technical personnel should not assist intelligence analysts 


Question 4. (FS/SIANF) Correct! Mission Capabilities staff has access to the bulk metadata in order to prepare the metadata for the analysts to use. 
(FSHSIANF) Incorrect. The correct answer is b). Mission Capabilities staff has access to the bulk metadata in order to prepare the metadata for the analysts 
to use. 


Question 5. (FS/SIANF) Correct! If an intelligence analyst seeks assistance from technical personnel, technical personnel may offer assistance, but 
must be cautious that any results shared or discussed are based on RAS-approved identifiers and those results that fall within the number of hops 
authorized for intelligence analysis purposes. 

(FSHSIHANE) Incorrect. The correct answer is c). If an intelligence analyst seeks assistance from technical personnel, technical personnel may offer 
assistance, but must be cautious that any results shared or discussed are based on RAS-approved identifiers and those results that fall within the 
number of hops authorized for intelligence analysis purposes. 
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FRAME ID: 5080 
(U) Summary 


(U) Now that you have completed this module you should be able to: 
e (U) Compare and contrast the analytical and technical work roles 
e (U) Identify analytical and technical personnels authorization to touch the data 
e (U) Identify how the authorities impact interactions with other roles and the data 


NEXT FRAME ID: 5090 


GRAPHIC/AV: 
(U) Insert image of HMC Character and 
Technical Character sitting at a table 


(U) (Technical Character): Now that we have completed this part of our road trip, you should be able to: 
e (U) Compare and contrast the analytical and technical work roles 
e (U) Identify analytical and technical personnel’s authorization to touch the data 
e (U) Identify how the authorities impact interactions with other roles and the data 


(FS#SHNE) (Technical Character): Now that you are aware of the various roles that support the BR and PR/TT Programs you will move on to your role- 
specific module that will go into additional detail on topics relevant to your responsibilities. 
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